Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
365,237 total · sorted newest first- Dec 28, 2023
Malicious code in biscits (npm)
1 compromised version
- Dec 28, 2023
Malware in axio-https
1 compromised version
- Dec 28, 2023
Malware in discord.js-self2
1 compromised version
- Dec 28, 2023
Malware in discord.js-self-v21
1 compromised version
- Dec 28, 2023
Malicious code in spectrum-utils (npm)
3 compromised versions
- Dec 27, 2023
Malicious code in axio-https (npm)
1 compromised version
- Dec 27, 2023
Malware in react-hook-form-latest
1 compromised version
- Dec 27, 2023
Malware in myservice.web
1 compromised version
- Dec 27, 2023
Malicious code in mux-leverage-protocol (npm)
1 compromised version
- Dec 27, 2023
Malware in fe-commons
1 compromised version
- Dec 27, 2023
Malware in next-id-doc
1 compromised version
- Dec 27, 2023
Malicious code in discord.js-selfbot-v23 (npm)
- Dec 27, 2023
Malware in discord.js-selfbot-v23
1 compromised version
- Dec 27, 2023
Malicious code in @push-web/tinkoff-push-web (npm)
1 compromised version
- Dec 26, 2023
Malicious code in @pkg-m/m (npm)
2 compromised versions
- Dec 26, 2023
Malicious code in formated (npm)
1 compromised version
- Dec 26, 2023
Malicious code in finalact (npm)
6 compromised versions
- Dec 25, 2023
Malicious code in multicolored (PyPI)
1 compromised version
- Dec 25, 2023
Malicious code in vibrant (PyPI)
1 compromised version
- Dec 25, 2023
Malicious code in richcolor (PyPI)
1 compromised version
- Dec 25, 2023
Malicious code in excaliburx (PyPI)
1 compromised version
- Dec 25, 2023
Malicious code in enchantv (PyPI)
1 compromised version
- Dec 25, 2023
Malicious code in newpackagetest2027 (PyPI)
1 compromised version
- Dec 25, 2023
Malicious code in newpackagetest2028 (PyPI)
1 compromised version
- Dec 25, 2023
Malicious code in newpackagetest2026 (PyPI)
1 compromised version
- Dec 24, 2023
Malicious code in discord.js-self-v21 (npm)
4 compromised versions
- Dec 24, 2023
Malicious code in discord.js-self2 (npm)
1 compromised version
- Dec 23, 2023
Malicious code in myservice.web (npm)
1 compromised version
- Dec 22, 2023
Malicious code in riskex (npm)
1 compromised version
- Dec 22, 2023
Malicious code in tata-play-web (npm)
1 compromised version
- Dec 22, 2023
Malicious code in fe-commons (npm)
8 compromised versions
- Dec 22, 2023
Malicious code in next-id-doc (npm)
1 compromised version
- Dec 22, 2023
Malicious code in release-management-slack (npm)
1 compromised version
- Dec 22, 2023
Malware in release-management-slack
1 compromised version
- Dec 22, 2023
Malicious code in jupyter_matlab_labextension (npm)
- Dec 22, 2023
Malicious code in element-block-starter (npm)
- Dec 22, 2023
Malware in jupyter_matlab_labextension
1 compromised version
- Dec 22, 2023
Malware in element-block-starter
1 compromised version
- Dec 22, 2023
Malware in run-matlab-command
1 compromised version
- Dec 22, 2023
Malicious code in hackathon-web (npm)
- Dec 22, 2023
Malware in hackathon-web
1 compromised version
- Dec 21, 2023
Malicious code in run-matlab-command (npm)
1 compromised version
- Dec 21, 2023
Malicious code in flow-session-guard (npm)
1 compromised version
- Dec 20, 2023
Malicious code in reduced-ui-pack (npm)
- Dec 20, 2023
Malware in reduced-ui-pack
1 compromised version
- Dec 20, 2023
Malware in create-codecpetjs-bdd-tests
1 compromised version
- Dec 20, 2023
Malware in unilin
1 compromised version
- Dec 20, 2023
Malware in biobot
1 compromised version
- Dec 20, 2023
Malicious code in dsc-sb-v13 (npm)
2 compromised versions
- Dec 20, 2023
Malicious code in djs-sb-v13 (npm)
2 compromised versions
Page 6799 of 7,305